CVE-2019-10465 – A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall …

Vuln ID: CVE-2019-10465

Published:  2019-10-23  13:15:10Z

Description: A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

Source: NVD.NIST.GOV

 

Tags